
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A70F30950EA363A2B604CA9A7B6F891F5C9A6C0B27BAE9A4CA7A133ECA1D1CB6/0/334DAF05A34938F07C5FE4CB8DEE6EDB6E7B58B1.mft
File: 334DAF05A34938F07C5FE4CB8DEE6EDB6E7B58B1.mft (raw, json)
Hash identifier: 23nkvaaBavA0RRNhvdJ0B9SfkiHKr3TTQ0InsjNzswg=
Subject key identifier: 5A:59:42:13:54:A2:0E:D5:52:73:6B:AE:D1:0B:39:2B:C9:0D:76:CB
Authority key identifier: 33:4D:AF:05:A3:49:38:F0:7C:5F:E4:CB:8D:EE:6E:DB:6E:7B:58:B1
Certificate issuer: /CN=334DAF05A34938F07C5FE4CB8DEE6EDB6E7B58B1
Certificate serial: 7F686012E96BB43949E602B0CB9D34D11FC082AF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/334DAF05A34938F07C5FE4CB8DEE6EDB6E7B58B1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A70F30950EA363A2B604CA9A7B6F891F5C9A6C0B27BAE9A4CA7A133ECA1D1CB6/0/334DAF05A34938F07C5FE4CB8DEE6EDB6E7B58B1.mft
Manifest number: 0E
Signing time: Wed 25 Mar 2026 12:55:08 +0000
Manifest this update: Wed 25 Mar 2026 12:50:08 +0000
Manifest next update: Mon 30 Mar 2026 08:48:08 +0000
Files and hashes: 1: 334DAF05A34938F07C5FE4CB8DEE6EDB6E7B58B1.crl (hash: XK/KlZ29k2ewQ17LvnP+vSLQSwKFHeVMJao7SmD0LXc=)
2: 323830333a666664303a3a2f33322d3438203d3e20323734323638.roa (hash: I2rCEb/A6YaOol92xlq1AV1VtuhsdsojIQ6SL/x0fMo=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A70F30950EA363A2B604CA9A7B6F891F5C9A6C0B27BAE9A4CA7A133ECA1D1CB6/0/334DAF05A34938F07C5FE4CB8DEE6EDB6E7B58B1.crl
rsync://repository.lacnic.net/rpki/lacnic/A70F30950EA363A2B604CA9A7B6F891F5C9A6C0B27BAE9A4CA7A133ECA1D1CB6/0/334DAF05A34938F07C5FE4CB8DEE6EDB6E7B58B1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/334DAF05A34938F07C5FE4CB8DEE6EDB6E7B58B1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 08:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:68:60:12:e9:6b:b4:39:49:e6:02:b0:cb:9d:34:d1:1f:c0:82:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334DAF05A34938F07C5FE4CB8DEE6EDB6E7B58B1
Validity
Not Before: Mar 25 12:50:08 2026 GMT
Not After : Mar 30 08:48:08 2026 GMT
Subject: CN=5A59421354A20ED552736BAED10B392BC90D76CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dc:eb:44:ff:01:84:69:36:c4:92:80:60:40:
96:34:81:1e:ec:0d:ec:fb:68:5c:a9:ac:cf:dd:fc:
fc:49:b8:9e:eb:ec:c2:df:c2:6d:80:ab:9c:89:73:
6b:a9:5b:b3:61:c0:65:0f:8a:d2:d0:ce:98:b1:de:
45:81:b6:19:17:f1:5f:9d:3a:24:91:9d:0f:dc:fc:
85:3a:5c:bb:d6:ee:6c:a8:4f:46:e2:ca:af:c8:f3:
3b:cb:a0:47:fe:1c:2e:97:89:d5:f1:ed:fd:67:d4:
89:fb:e9:2b:68:24:53:50:f6:9b:e1:27:13:ff:4e:
af:a2:28:5e:bb:92:34:d6:09:67:80:e4:eb:7e:00:
1b:74:f6:de:95:a9:d8:39:d1:f0:f9:ce:35:da:11:
c0:8f:13:42:2c:6d:e5:97:85:24:e1:1e:68:c6:ac:
94:71:9e:c2:59:c5:4f:71:96:59:9e:cd:00:75:89:
b9:93:f0:e1:18:c1:7f:ff:49:42:c2:a7:ed:aa:fe:
11:f8:c3:dc:ef:84:a5:fa:39:31:ca:11:25:a6:6e:
5f:fe:bd:94:4a:c7:99:c5:da:a6:4a:02:53:91:80:
dc:f3:ac:fc:23:ff:8e:27:93:8f:be:2d:05:3c:dd:
ca:ff:79:2e:1b:bb:cb:7b:db:62:a1:6a:f1:09:93:
90:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:59:42:13:54:A2:0E:D5:52:73:6B:AE:D1:0B:39:2B:C9:0D:76:CB
X509v3 Authority Key Identifier:
keyid:33:4D:AF:05:A3:49:38:F0:7C:5F:E4:CB:8D:EE:6E:DB:6E:7B:58:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A70F30950EA363A2B604CA9A7B6F891F5C9A6C0B27BAE9A4CA7A133ECA1D1CB6/0/334DAF05A34938F07C5FE4CB8DEE6EDB6E7B58B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/334DAF05A34938F07C5FE4CB8DEE6EDB6E7B58B1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A70F30950EA363A2B604CA9A7B6F891F5C9A6C0B27BAE9A4CA7A133ECA1D1CB6/0/334DAF05A34938F07C5FE4CB8DEE6EDB6E7B58B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9c:ad:19:46:ed:a8:2d:6e:a3:83:be:a1:a2:25:4d:00:d7:
63:f3:a2:de:2a:c7:5c:ec:9e:99:00:b2:56:f1:64:7e:6d:42:
ab:54:6f:12:5f:a1:ea:87:29:b4:5b:93:42:16:56:49:3f:4f:
e1:88:10:ac:00:b7:d3:88:91:b2:7e:d4:c0:50:2c:1f:cc:fd:
db:22:1b:6b:3a:66:42:41:ea:bd:13:2e:6d:47:9f:de:87:f8:
80:8f:a6:5e:d3:46:8e:cb:c9:09:c6:20:0e:81:05:f1:58:48:
d3:da:c5:17:61:10:98:c8:4d:9d:d8:e9:1c:a8:0e:37:ce:71:
ce:cd:62:f6:52:4e:3d:90:f4:a8:a6:08:e6:9b:c0:70:52:52:
e5:df:5f:ef:54:03:ed:fe:55:b4:34:10:74:cd:76:e1:72:de:
c8:a5:54:20:27:05:57:fb:e4:f4:e4:29:5c:82:91:43:15:ce:
05:ee:64:c6:34:7f:58:45:0a:d2:38:31:c8:34:79:01:d0:80:
7c:a1:e8:3b:3e:8a:a7:4a:dd:8a:3a:5c:f9:db:f0:a3:04:e1:
af:05:4e:17:91:55:e7:74:9b:0d:60:83:1c:05:25:fd:94:00:
47:78:a7:84:7c:af:05:ab:12:e7:fb:a0:e1:a5:57:07:1b:54:
04:e3:43:ae
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUf2hgEulrtDlJ5gKwy5000R/Agq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM0REFGMDVBMzQ5MzhGMDdDNUZFNENCOERFRTZFREI2
RTdCNThCMTAeFw0yNjAzMjUxMjUwMDhaFw0yNjAzMzAwODQ4MDhaMDMxMTAvBgNV
BAMTKDVBNTk0MjEzNTRBMjBFRDU1MjczNkJBRUQxMEIzOTJCQzkwRDc2Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU3OtE/wGEaTbEkoBgQJY0gR7s
Dez7aFyprM/d/PxJuJ7r7MLfwm2Aq5yJc2upW7NhwGUPitLQzpix3kWBthkX8V+d
OiSRnQ/c/IU6XLvW7myoT0biyq/I8zvLoEf+HC6XidXx7f1n1In76StoJFNQ9pvh
JxP/Tq+iKF67kjTWCWeA5Ot+ABt09t6Vqdg50fD5zjXaEcCPE0IsbeWXhSThHmjG
rJRxnsJZxU9xllmezQB1ibmT8OEYwX//SULCp+2q/hH4w9zvhKX6OTHKESWmbl/+
vZRKx5nF2qZKAlORgNzzrPwj/44nk4++LQU83cr/eS4bu8t722KhavEJk5DZAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUWllCE1SiDtVSc2uu0Qs5K8kNdsswHwYDVR0j
BBgwFoAUM02vBaNJOPB8X+TLje5u2257WLEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNzBGMzA5NTBFQTM2M0EyQjYwNENBOUE3QjZGODkxRjVD
OUE2QzBCMjdCQUU5QTRDQTdBMTMzRUNBMUQxQ0I2LzAvMzM0REFGMDVBMzQ5MzhG
MDdDNUZFNENCOERFRTZFREI2RTdCNThCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMzREQUYwNUEzNDkzOEYwN0M1
RkU0Q0I4REVFNkVEQjZFN0I1OEIxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTcwRjMwOTUwRUEzNjNBMkI2MDRDQTlBN0I2Rjg5MUY1QzlBNkMwQjI3
QkFFOUE0Q0E3QTEzM0VDQTFEMUNCNi8wLzMzNERBRjA1QTM0OTM4RjA3QzVGRTRD
QjhERUU2RURCNkU3QjU4QjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgnK0ZRu2oLW6jg76hoiVNANdj
86LeKsdc7J6ZALJW8WR+bUKrVG8SX6Hqhym0W5NCFlZJP0/hiBCsALfTiJGyftTA
UCwfzP3bIhtrOmZCQeq9Ey5tR5/eh/iAj6Ze00aOy8kJxiAOgQXxWEjT2sUXYRCY
yE2d2OkcqA43znHOzWL2Uk49kPSopgjmm8BwUlLl31/vVAPt/lW0NBB0zXbhct7I
pVQgJwVX++T05ClcgpFDFc4F7mTGNH9YRQrSODHINHkB0IB8oeg7PoqnSt2KOlz5
2/CjBOGvBU4XkVXndJsNYIMcBSX9lABHeKeEfK8FqxLn+6DhpVcHG1QE40Ou
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:34:10 2026 by rpki-client